Commit Graph

1067 Commits

Author SHA1 Message Date
Aminda Suomalainen c3f351d21f sshd_config: add commented AcceptEnv
and reason why it's commented, security, ShellShock worked with remotely
sent environent variables even with restricted accounts.
2015-09-06 07:33:32 +03:00
Aminda Suomalainen 90c86466dd ssh_config: also sendenv LANGUAGE 2015-09-06 07:30:41 +03:00
Aminda Suomalainen 6fc4b6a29b ssh_config: add missing dot 2015-09-05 23:50:31 +03:00
Aminda Suomalainen 28c2f0b8d8 ssh_config: SendEnv LANG LC_* 2015-09-05 23:46:00 +03:00
Aminda Suomalainen ed0d6d663a don't use LC_ALL
According to ArchWiki, LANG sets LC_* which aren't explicitly set and
LC_ALL is meant for testing/troubleshooting only.
2015-09-05 23:39:16 +03:00
Aminda Suomalainen c50516ced3 etc/xdg/autostart: add redshift-gtk 2015-09-05 22:57:45 +03:00
Aminda Suomalainen c2b93abe27 relevant systemd services: after network-online 2015-09-05 09:07:41 +03:00
Aminda Suomalainen 110fa37539 remove FINEID keys
1. I don't appear to even use the card.
2. They are RSA which is just expiring.
2015-09-02 18:21:59 +03:00
Aminda Suomalainen b12c2df5d2 ssh config: remove IdentityFile
It's more bother than it's worth in my use.
2015-09-02 18:15:53 +03:00
Aminda Suomalainen e37780bb2c add my ed25519 key 2015-09-02 18:04:04 +03:00
Aminda Suomalainen 2687615bf0 chmod: touch ~/.ssh/authorized_keys before chmo...
dding it.
2015-09-02 16:38:59 +03:00
Aminda Suomalainen bd3ee60e61 ssh_config: fix paste fail 2015-09-02 08:33:02 +03:00
Aminda Suomalainen 66f604a6dd ssh_config: add UpdateHostKeys yes 2015-09-02 08:15:16 +03:00
Aminda Suomalainen c05b52354f sshd_config: restore Client*
I am sure I committed them already, but they have disappeared somewhere.
Maybe I accidentally overwrote them.
2015-09-01 17:37:33 +03:00
Aminda Suomalainen 888686ef48 etc/ssh/copy: add verbosity 2015-09-01 17:32:56 +03:00
Aminda Suomalainen c2c0c4fa08 etc/ssh: add copy script 2015-09-01 17:31:42 +03:00
Aminda Suomalainen 25bf96e30a ssh_config: my ssh key is not system-wide 2015-09-01 17:16:37 +03:00
Aminda Suomalainen 898b1dbfaf update ssh config 2015-09-01 17:14:06 +03:00
Aminda Suomalainen 96dfc06668 ssh_config: remove unrelated comments 2015-09-01 17:06:33 +03:00
Aminda Suomalainen defa0b9df1 etc/ssh: add ssh_config 2015-09-01 16:48:27 +03:00
Aminda Suomalainen 4cdf8dfe71 sshd_config: add ClientAliveCountMax ClientAliveInterval 2015-09-01 16:40:56 +03:00
Aminda Suomalainen 2b266ac7e2 ssh config: add ServerAliveCountMax 2015-09-01 15:54:05 +03:00
Aminda Suomalainen 359a4becb8 rc: remove OS X specific ssh-add
OS X OpenSSH doesn't work with VerifyHostKeyDNS=yes, so it OpenSSH must
be installed from Homebrew or MacPorts which (at least Homebrew) don't
support the flag to add the key to keychain.
2015-08-31 09:25:11 +03:00
Aminda Suomalainen 702d426345 sort ssh config 2015-08-30 17:17:12 +03:00
Aminda Suomalainen a87af2c43c ssh config: add HashKnownHosts 2015-08-30 17:11:04 +03:00
Aminda Suomalainen 898b30cccc update ssh config 2015-08-30 17:08:29 +03:00
Aminda Suomalainen 73e9e99d9c sshd_config: cleaning up 2015-08-30 16:54:21 +03:00
Aminda Suomalainen 7b8bf1710d conf/inxi.conf: use ♥ as inxi/inxi.conf 2015-08-28 20:02:43 +03:00
Aminda Suomalainen 3c0bcab8d8 install: remove xsessionrc 2015-08-28 19:18:19 +03:00
Aminda Suomalainen db56a120ce rc: xsessionrc & migrate reasonable lines to profile 2015-08-28 19:17:08 +03:00
Aminda Suomalainen c922d0aa37 etc/ssh/sshd_config: fix banner 2015-08-28 19:25:26 +03:00
Aminda Suomalainen 96538ae35c ssh config: add UpdateHostKeys=ask 2015-08-28 19:22:54 +03:00
Aminda Suomalainen 7e4bbfba5a sshd_config: also remove ecdsa keys 2015-08-28 14:29:34 +03:00
Aminda Suomalainen 04df2e532b update sshd_config from Arch
OpenSSH 7.1p1-1

Note the sftp subsystem which differs between at least Debian and Arch.
2015-08-28 14:00:25 +03:00
Aminda Suomalainen f69a361ed1 sshd_config: deprecate dsa 2015-08-28 13:54:36 +03:00
Aminda Suomalainen 090f4154d6 rc: add $HOME/.linuxbrew/<bin|sbin|games> to $PATH
To symlink it to sdcard on Sailfish
2015-08-28 08:03:44 +03:00
Aminda Suomalainen ae6651cd47 systemd: add reflector.service 2015-08-25 14:13:44 +03:00
Aminda Suomalainen 3d5360c706 ssh config: add verdarik & tezagm 2015-08-23 06:54:26 +03:00
Aminda Suomalainen b34a567af7 rc: alias winkey
The xxd method, because it's easier to alias. Closes #81
2015-08-22 15:13:22 +03:00
Aminda Suomalainen 7ff510b42b add etc/install
Closes #74
2015-08-22 15:10:01 +03:00
Aminda Suomalainen bec7aced22 etc/systemd/system: README updates 2015-08-21 19:27:40 +03:00
Aminda Suomalainen 76633ba61d add etc/unbound/dnscrypt-proxy.conf 2015-08-21 19:16:12 +03:00
Aminda Suomalainen 18931c320a add dnscrypt proxy services
Thanks @Fusl

Fixes #63
2015-08-21 19:09:39 +03:00
Aminda Suomalainen dc5531dfcd cleaning etc/systemd/system 2015-08-21 19:06:11 +03:00
Aminda Suomalainen 8a281a9550 ssh config: use nemo with synvaler 2015-08-20 20:48:28 +03:00
Aminda Suomalainen c4dcb39b8c nginx: remove the neverused vhost 2015-08-20 20:47:18 +03:00
Aminda Suomalainen 3a32185433 etc/nginx/sites-availble: add X-Frame-Options 2015-08-20 20:36:32 +03:00
Aminda Suomalainen b2eaca582a rc: fix serversslcertfp function
Thanks @mgeedmin from Mikaela/mikaela.github.io#69

Other functions must still be checked probably.

Closes #82
2015-08-20 18:56:33 +03:00
Aminda Suomalainen a06465d161 unbound: move forwards.conf under unbound.conf.d 2015-08-20 18:39:40 +03:00
Aminda Suomalainen 2ab0601c8d systemd: remove dnscrypt-proxy & add miredo 2015-08-20 18:29:00 +03:00